Drupal Case Tracker Module Security Bypass and HTML Injection Vulnerabilities

Bugtraq ID:	41107
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 23 2010 12:00AM
Updated:	Jun 23 2010 12:00AM
Credit:	Mariano D'Agostino, Clemens Tolboom
Vulnerable:	Drupal Case Tracker 5.x-1.3
Not Vulnerable:	Drupal Case Tracker 5.x-1.4

Drupal Case Tracker Module Security Bypass and HTML Injection Vulnerabilities

Drupal Case Tracker module is prone to a security-bypass vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, control how the site is rendered to the user, or gain unauthorized access; other attacks may also be possible.

Versions prior to Case Tracker 5.x-1.4 are vulnerable.

Drupal Case Tracker Module Security Bypass and HTML Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

Drupal Case Tracker Module Security Bypass and HTML Injection Vulnerabilities

Solution:
Updates are available. Please see the references for details.


Drupal Case Tracker 5.x-1.3

• Drupal casetracker-5.x-1.4
  http://ftp.drupal.org/files/projects/casetracker-5.x-1.4.tar.gz

Drupal Case Tracker Module Security Bypass and HTML Injection Vulnerabilities

References:

• Drupal Language Switcher Dropdown Homepage (Drupal)
  
• SA-CONTRIB-2010-069 - Case Tracker - Multiple Vulnerabilities (Drupal)